I would note that numerous places implementing SPF fail to do so correctly. This is why SpamAssassin, for example, does not give SPF failure a high spam rating. If you set it up to reject based on SPF, you are likely going to reject a lot of valid emails.